Pin the Roots or Don't Merge: A Fail-Closed Agent Egress Checklist

You should not merge an agent change until every filesystem root, network host, and executable it can...